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SPECIFICATION 



TITLE OF THE INVENTION 

Data Processing Method with Restricted Data 
Arrangement, Storage Area Management Method, and Data 
Processing System 

BACKGROUND OF THE INVENTION 

The present invention relates to data processing 
methods and, more particularly to a data processing method 
used favorably for data processing wherein data should be 
strictly managed to prevent leakage of secrets at the time 
of copying and/or moving data. 

For data processing with a computer system, there 
are conventional techniques wherein data is copied in 
advance in a separate storage area so that critical 
corporate data may not be lost upon occurrence of an 
equipment failure or a disaster. Such techniques are 
generically called "backup." In addition, for example, 
data is sometimes copied for the purpose of delivering 
business data within a company. 

It should be noted, here, that much of corporate 
data is subjected to organizational and/or geographical 
restrictions regarding the range in which data copy or data 
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migration can be made. Hereinafter, such range shall be 
referred to as "a possible data arrangement range." 
Examples of information whose possible data arrangement 
range is restricted include technical information that is 
5 prohibited to be exported to specified countries under the 
export control raw, intra-company classified information, 
and other company's classified information that is obtained 
under an agreement with that company. 

Examples of techniques to restrict data copying 

10 include the one in which an authentication is executed 

whenever data is accessed, an access is granted only to an 
authorized client, and accesses are restricted to the 
number of times specified in advance. Also, some other 
techniques include the one in which part of data is 

15 encrypted, and accesses are restricted by distributing 
decryption keys only to users who are authorized for 
reading the data (e.g. Japanese Patent Laid-open No. 09- 
006682 and Japanese Patent Laid-open No. 2001-103047). 
As described above, much of corporate data is 

20 subjected to organizational and/or geographical 

restrictions in terms of the possible data arrangement 
range. Consequently, when work that accompanies copying or 
migration of conventionally available data is conducted, it 
is necessary to consider if the work does not infringe the 
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restriction of the possible data arrangement range. 
Performing the work while paying attention to the possible 
data arrangement range requires considerable efforts when 
the data amount to be controlled is large, and the defined 
5 restriction of the possible data arrangement range may not 
be observed due to a wrong operation by the administrator. 
When this happens, laws, rules and agreements concerning 
data handling rules could be violated due to the wrong 
operation by the administrator while the data owner does 

10 not aware of such infringement. In addition, when data 
that is not in the possible data arrangement range is 
fraudulently accessed, critical secret information may be 
leaked out, thus incurring significant job-related losses. 
Such problems cannot be solved with techniques to 

15 restrict data copying offered by the Japanese Patent Laid- 
open No. 09-006682 and the Japanese Patent Laid-open No. 
2001-103047, both of which refer to related art. 

With the technique of the Japanese Patent Laid-open 
No. 09-006682 to restrict the number of authentications and 

20 access times at the time of accessing data, it is necessary 
to distribute authentication information to all users 
accessing the above- stated data, and therefore, the data 
may be fraudulently accessed when the authentication 
information is leaked out. Further, regarding restriction 
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of the number of accesses, it is not possible to establish 
a range of restriction, in which, for example, copying can 
be made unlimitedly within the range, but copying must not 
be made even once beyond the range. 
5 Likewise, as for the technique to encrypt part of 

data referred to in the Japanese Patent Laid-open No. 2001- 
103047, there is a possibility of leaking out of keys, or 
secret information leaks due to data analysis, and beside 
that, significant efforts are required to manage the keys 
10 (distribution, prevention of leak out, etc.) or to encrypt 
the data. 

An object of the present invention is to provide a 
data processing method for preventing violation of rules or 
leaking out of secret information attributed to wrong 
15 operation of an administrator, thus enabling data 

management that offers excellent security protection, at 
the time of making copies of corporate business data, etc. 

SUMMARY OF THE INVENTION 
20 In the present invention, to achieve the above- 

described object, a possible data arrangement range of data 
included in a certain storage area is stored for each 
storage area (a volume, a logical volume, a file system, a 
file, etc. that are available in a storage device). 
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In addition, range information is defined for a 
storage area to which the data is copied, that is, a "copy- 
destination" storage area. 

At the time of copying data that is available in the 
5 storage area, a judgment is made whether or not the range 
information of the copy-destination storage area is within 
the possible data arrangement range. If it is in the 
possible data arrangement range, copying is executed. 
Otherwise, if it is not in the possible data arrangement 
10 range, copying is not executed. 

Further, at the time of copying data, the possible 
data arrangement range described above is also copied. 
When the thus copied data is further copied on another 
storage area, a judgment will be made as to whether or not 
15 the range information of the copy-destination another 

storage area data is within the possible data arrangement 
range. 

BRIEF DESCRIPTION OF THE DRAWINGS 
20 Fig. 1 is a diagram describing a hierarchy of 

storage areas according to the present invention; 

Fig. 2 is a diagram describing a model logical range 
according to the present invention; 

Fig. 3 is a diagram describing copying procedures 
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under a data processing method in which the possible data 
arrangement range according to the present invention is 
introduced (Part 1); 

Fig. 4 is a diagram describing copying procedures 
5 under a data processing method in which the possible data 
arrangement range according to the present invention is 
introduced ( Part 2 ) ; 

Fig. 5 is a diagram describing accesses from clients 
for a case where the storage area management method 
10 according to the present invention is introduced; 

Fig. 6 is a configuration diagram of a computer 
system according to a first embodiment of the present 
invention; 

Fig. 7 is an internal configuration diagram of a 
15 storage device according to the first embodiment of the 
present invention; 

Fig. 8 is a diagram illustrating the possible data 
arrangement range of data in a volume; 

Fig. 9 is a diagram illustrating group definition 
20 information; 

Fig. 10 is a diagram illustrating range information 
of a volume; 

Fig. 11 is a general chart illustrating processing 
for a case where copying is made under a data processing 
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method according to the first embodiment of the present 
invention; 

Fig. 12 is a flow chart illustrating processing to 
examine whether the data of the specified copy-destination 
5 volume can be arranged or not; 

Fig. 13 is a flow chart illustrating processing to 
copy data and possible data arrangement range information 
in a volume; 

Fig. 14 is a flow chart illustrating processing in a 
10 data copy request unit; 

Fig. 15 is a flow chart illustrating processing in a 
data copy unit; 

Fig. 16 is an internal configuration diagram of a 
host computer according to a second embodiment of the 
15 present invention; 

Fig. 17 is a diagram showing a configuration of 
copy- source storage area; 

Fig. 18 is a diagram showing logical volume 
definition information; 
20 Fig. 19 is a diagram showing file system 

configuration information; 

Fig. 20 is a diagram showing range information of a 
logical volume; 

Fig. 21 is a flow chart illustrating processing of 
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the data arrangement range confirmation unit; 

Fig. 22 a diagram showing an example of typical range 
information in the second embodiment of the present 
invention; 

5 Fig. 23 is a diagram showing an internal 

configuration of a management computer according to a third 
embodiment of the present invention; 

Fig. 24 is a diagram showing a possible data 
arrangement range according to the third preferred 
10 embodiment of the present invention; 

Fig. 25 is a diagram showing a volume information 

list; 

Fig. 26 is a diagram showing range information of 
volumes ; 

15 Fig. 27 is a flow chart illustrating processing in a 

volume selection unit; 

Fig. 28 is a configuration diagram of a computer 
system according to a fourth embodiment of the present 
invention ; 

20 Fig. 29 is an internal configuration diagram of a 

host computer according to the fourth embodiment of the 
present invention ; 

Fig. 30 is a diagram showing device-belonging 
information; 
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Fig. 31 is a diagram showing a possible data 
arrangement range and typical range information according 
to the fourth embodiment of the present invention; 

Fig. 32 is a flow chart illustrating processing in 
5 the access control confirmation unit 32600; 

Fig. 33 is a diagram showing a display object that 
displays a logical range that is targeted for a possible 
data arrangement range and the range information of a 
storage area; 

10 Fig. 34 is a diagram showing an example of a display 

object displaying a directory configuration to be accessed 
from a client computer; 

Fig. 35 is a diagram showing an example of a display 
object which expresses a file information list in a table 
15 format; and 

Fig. 36 is a diagram showing a utility screen that 
is offered when the data processing method and the storage 
area management method of the present invention is used. 



20 DESCRIPTION OF THE PREFERRED EMBODIMENTS 

Hereinafter, preferred embodiments of the present 
invention will be described with reference to Figs. 1 to 36. 
[Basic Concept of the Present Invention] 

Before describing the preferred embodiments, the 
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basic concept and the outlined ideas of the present 
invention will be described by referring to Figs. 1 to 5 . 
Fig. 1 is a diagram describing a hierarchy of storage areas 
according to the present invention. Fig. 2 is a diagram 
5 describing a model logical range for the present invention. 
Figs . 3 and 4 are diagrams describing copying procedures 
under a data processing method in which the possible data 
arrangement range according to the present invention is 
introduced. Fig. 5 is a diagram describing accesses from 

10 clients for a case where the storage area management method 
according to the present invention is introduced. 

For the purpose of describing the concept of the 
present invention, a model case will be assumed as a 
hierarchy of storage areas, wherein the storage area 

15 hierarchy is configured, as shown in Fig. 1, in the order 
of file, file system, logical volume and volume, in the 
direction from the upper hierarchy, or logical hierarchy to 
the lower hierarchy, or physical hierarchy. In addition, 
the upper memory hierarchy is realized by utilizing 

20 functions of lower storage areas. 

A file is the minimum data unit of the storage areas 
indicated in Fig. 1. A file system is an area that is 
formatted in a certain format to store files and 
information to control files. 



- 11 - 

A volume is the largest unit of storage area 
indicated in Fig. 1, which stored data, and, it is most 
proximate to a physical storage device feeling-wise. 

A logical volume is a storage area in which the 
5 volume is put in a logical form, and one volume can be 
handled, as shown in Fig. 1 , as a plurality of logical 
volumes, or conversely, a plurality of volumes can be 
handled as one logical volume. 

Next, in the present invention, a logical range will 
10 be assumed as a model that is closely related to business 
tasks. 

In an example shown in Fig. 2, firstly, for the unit 
level of countries, "Japan" and "U.S.A." are separated. 
Since governing laws are different in these two ranges, 
15 there would be data or secret matters that should be 
treated carefully. 

The logical range in "Japan" incorporates "Company 
A" for the unit of company, and the lower office level 
incorporates "Office B" , and the further lower level 
20 incorporates "Department D", "Department E", etc. 

The setting of this logical range shall allow 
persons in that range to access data belonging to that 
logical range . 

For example, there is such data that, even if the 
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data can be accessed by persons in Department D, accesses 
are prohibited by persons in Office B which covers a range 
wider than Department D, that is, such data is treated as 
secret data for other persons than those in Department D. 
5 Likewise, data that can only be accessed by persons 

in Office B cannot be accessed by persons in "Office C" or 
those in other offices, even if all such offices belong to 
Company A. 

Assuming such logical range, the present invention 
10 will configure range information of a possible data 
arrangement range and a storage area. 

A possible data arrangement range of data shall 
imply information on a logical range that allows 
arrangement of the data. 
15 Range information of a storage area shall imply 

information on a logical range that is defined for a 
storage area for the purpose of judging whether certain 
data should be stored therein or not. When range 
information of a memory range is defined, all persons 
20 belonging to that logical range are considered to have a 
possibility to access that storage area. 

As shown in Fig. 3, it shall be so assumed that a 
file A is incorporated in a logical volume A, and the 
possible data arrangement range is "Office B." More 



specifically, the data shall have been deemed to be data 
that can be accessed by persons in office B. 

Next, assuming a case where the file A is copied to 
one of other logical volumes . 

In the range information of a logical volume B, 
"Department D" is configured. In this case, copying is 
permitted since "Office B" which is in the possible data 
arrangement range of the file A includes "Department D." 

In the range information of a logical volume C, 
"Company A" is configured. In this case, "Office B" which 
is in the possible data arrangement range of the file A is 
included in "Company A." More specifically, in this case, 
copying is prohibited since the logical volume C may be 
accessed by all persons in "Company A." 

Since the range information of a logical volume D is 
for the "U.S.A.", copying is prohibited, as a matter of 
course . 

As stated in the above, the basic concept of the 
present invention refers to a method wherein a logical 
range in a storage system is first determined, a possible 
data arrangement range is compared with the range 
information of a storage area, and then whether data can be 
arranged in that storage area or not is determined. 

Next, a situation shown in Fig. 4 will be assumed. 
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It shall be assumed that a file system A and a file 
system B are secured in a logical volume E, and the file 
system A incorporates a file E and a file F. It shall also 
be assumed that the possible data arrangement range of the 
5 file E is "Department D" , and the possible data arrangement 
range of the file F is "Office B." Further, the possible 
data arrangement range for all data in the file system B is 
" Company A. " 

Here, it shall be assumed that a file system is 
10 designated, and all data in the file system is copied to 

another logical volume. 

At this time, the file E whose possible data 

arrangement range is "Department D" and the file F whose 

possible data arrangement range is "Office B" are included 
15 in the file system A. Consequently, for the entire file 

system A, the possible data arrangement range should be 

" Department D . " 

As stated in the above, there is a general rule that, 

when copying is made in a unit of storage area, the data 
20 having the narrowest possible data arrangement range among 

data included in the storage area can be the applicant. 

Supposedly, when the data is assumed to be the "typical 

range information" in the storage area, if, as typical 

range information, data is arranged in another storage area 
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by picking up the data having the narrowest possible data 
arrangement range among data included in the typical range 
information, the comparison can be made with the range 
information in that storage area. 

5 For example, as shown in Fig. 4, suppose that 

copying of the file system A is being made under the 
condition that the range information of the logical volume 
F is "Office B." Since the typical range information of 
the file system A is "Department D", and this does not 

10 include "Office B" , copying is prohibited. 

On the other hand, since the possible data 
arrangement range of all data of the file system B is 
"Company A", it can be considered that the typical range 
information of the file system B is also "Company A." 

15 Consequently, when the file system B is being copied to the 
logical volume F, copying is permitted since "Company A" of 
the typical range information includes the fact that the 
range information of the logical volume F includes "Office 
B. " 

20 Further, a case will be assumed where the logical 

volume E is designated and it is copied to a logical volume 
G wherein the range information is "Office B". 

In the logical volume E, lower storage areas of two 
file systems A and B are included, the typical range 
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information of the file system A is "Department D", and the 
typical range information of the file system A is "Office 
B." The typical range information of the logical volume E 
will be "Department D", which is narrower than "Office B" . 
5 From the above, since "Department D" of the typical 

range information does not include "Office B" of the range 
information of the logical volume F, copying in logical 
volume unit will not be permitted. 

Next, a case where access is made to certain data 
10 from a client computer of a computer system will be assumed. 

In the present invention, a definition of "device- 
belonging information" shall be given to a device, such as 
a client computer, that is allowed to access system data. 

The "device-belonging information" shall imply a 
15 logical range to which data accessing is permitted when a 
user uses that data. 

Further, accessing shall be permitted if device- 
belonging information is included in a possible data 
arrangement range or typical range information of a storage 
20 area, when compared to the possible data arrangement range 
or the typical range information of the storage area of 
data to which access is being made. 

For example, as shown in Fig. 5, it shall be assumed 
that there are client computers A and B, the device- 
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belonging information of the client computer A is "Office 
P", and the device-belonging information of the client 
computer B is "Department R." 

Further, it shall also be assumed that the file E 

5 and the file F are available in the file system D in a 
logical volume I. Also, it shall be assumed that the 
possible data arrangement range of the file E is 
"Department R" , and the possible data arrangement range of 
the file F is "Office Q." 

10 Under such circumstances, since, for the client 

computer A, the device-belonging information is "Office P" , 
and the possible data arrangement range of the file E is 
"Department R" , no accessing is possible to the file E from 
the client computer A. On the other hand, accessing from 

15 the client computer A to the file F is possible since the 
possible data arrangement range of the File F is "Office 
P. " 

In addition, since the typical range information of 
the file system D will be "Department R", accessing by 
20 designating the file system D from the client computer A is 
not possible. 

The typical range information of the logical volume 
I will also be "Department R." Since the device-belonging 
information of the client computer B is "Department R" , 
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accessing by designating the logical volume I from the 
client computer B to the entire logical volume I will be 
possible. 

5 [First Embodiment] 

Hereinafter, a first embodiment according to the 
present invention will be described with reference to Figs. 
6 through 15. 

The first preferred embodiment refers to an example 
10 wherein a possible data arrangement range is defined in 

volume units, and range information of a copy-destination 
storage area is also defined in volume units. 

More specifically, the embodiment refers to a data 
processing method wherein, at the time of copying data 
15 between two volumes that are respectively defined on 
different storage devices , the range information of a 
volume in the copy-destination volume is checked as to 
whether or not it is in the possible data arrangement range 
of data in the copy- source volume. Only if it exists in 
20 the possible arrangement range, copying is executed. 

First, the configuration of a computer system 
according to the present invention will be described with 
reference to Figs. 6 and 7. Fig. 6 is a configuration 
diagram of a computer system associated with the first 
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embodiment of the present invention. Fig. 7 is an internal 
configuration diagram of a storage device associated with 
the first embodiment of the present invention. 

With the computer system of the embodiment , a 
5 management computer 2000, host computers 2010 and 2020, and 
storage devices 2030 and 2040 are connected to one another 
through a network 2100, as shown in Fig. 6. In addition, 
the storage devices 2030 and 2040 are connected to each 
other through a storage network 2110. The management 

10 computer 2000 controls a volume copying function of the 

storage devices 2030 and 2040 through the network 2100. And 
this management computer 2000 can define the possible data 
arrangement range for data of storage areas and the range 
information of storage areas in the storage devices 2030 

15 and/or 2040. 

The host computers 2010 and 2020 execute a business 
application, and each computer uses a volume in a storage 
device of the storage devices 2030 and/or 2040. These host 
computers 2010 and 2020 read or write data of storage areas 

20 in said storage devices 2030 and/or 2040. 

The internal configuration of the storage devices 
2030 and 2040 is exemplified in Fig. 7. The storage device 
2030 includes volumes 3100, 3200, a CPU 3300, communication 
devices 3400, 3500, and a memory 3000, which are connected 
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to each other via a communication path 3900. Further, the 
communication device 3500 is connected to the network 2100, 
and the communication device 3400 is connected to the 
storage network 2110. 

5 The memory 3000 includes possible data arrangement 

range information 3010, group definition information 3020 
and a data copy program 3030. The data copy program 3030 
includes a data copy request processor 3032, a data copy 
unit 3034 and a data arrangement range confirmation unit 

10 3036. 

Meanwhile, the storage device 2040 includes volumes 
3700, 3750, a CPU 3800, a communication device 3850, and a 
memory 3600, which are connected to each other via a 
communication path 3950. Further, the communication device 

15 3850 is connected to the storage network 2101. The memory 
3600 includes possible data arrangement range information 
3620, group definition information 3640, volume range 
information 3660, and a data copy program 3680. The data 
copy program 3680 includes a data copy unit 3682, a volume 

20 range information supply unit 3684, and a data copy request 
processor 3686. 

The data copy program 3030 is a program that is 
stored in the volume 3100 or the volume 3200, and the 
program is loaded into the memory 3000 and is executed by 



the CPU 3300. Further, the possible data arrangement range 
information 3010 and the group definition information 3020 
are data that is stored in the volume 3100 or the volume 
3200, and the data is loaded into the memory 3000 and is 
used when the data copy program 3030 is executed. 

Likewise, the data copy program 3680 is stored in 
the volume 3700 or the volume 3750, and the program is 
loaded into the memory 3600 and is executed by the CPU 3800. 
Further, the possible data arrangement range information 
3620, the group definition information 3640 and the volume 
range information 36 60 are data that is stored in the 
volume 3700 or the volume 3750, and the data is loaded into 
the memory 3600 and is used when the data copy program 3680 
is executed. 

Hereinafter, the data structure according to the 
first embodiment of the present invention will be described 
with reference to Figs. 8 through 10. Fig. 8 is a diagram 
illustrating the possible data arrangement range of data in 
a volume. Fig. 9 is a diagram illustrating group 
definition information. Fig. 10 is a diagram illustrating 
range information of a volume. 

The possible data arrangement range information 3010 
of the embodiment is defined in volume units, as shown in 
Fig . 8 . This shows that all data in a volume included in a 



column 4000 has a possible arrangement range of data listed 
in a column 4010, as a possible data arrangement range. 

It may also be possible to state two or more ranges 
for the possible arrangement range of the column 4010, and 

5 the entire range thus stated may be applied. 

In addition, with the present embodiment, it is so 
arranged that a concept of "group" is introduced as an 
extended concept of the above- stated logical range to 
enable group designation of the possible data arrangement 

10 range as stated in a row 4110. 

The group designation information 3020 is typically 
shown in Fig. 9. Actually, for example as shown in a row 
5100, a definition is made in advance, assuming that 
"Institute A", "Office B" and "Office C" are included for 

15 "information group of company A", and "information group of 
company A" is designated for the possible data arrangement 
range . 

Volume range information to be defined as a copy 
destination is typically shown in Fig. 10. In the example 
20 of the embodiment, range information is defined in such a 
hierarchical manner that the definition covers from wider 
range information in "country" units to narrower range 
information in "project" units. 

Here, as shown in Fig. 8, it shall be assumed that 
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data in the volume 3100 is copied to a volume having range 
information of a volume whose copy destination is shown in 
Fig. 10. 

In this case, since the data in the volume 3100 is 
5 "Company A or Company B" in terms of "company" unit, 
judgment will be made in "company" unit as range 
information of copy-destination volume. More specifically, 
as shown in a row 6110, the range information of "Company 
A" is set for the "company" unit. Consequently, copying 

10 will be permitted since the possible data arrangement range 
of data in the volume 3100 is included in the range 
information of the copy-destination volume. 

Hereinafter, a data processing method according to 
the first embodiment of the present invention will be 

15 described with reference to Figs. 11 through 15. 

Fig. 11 is a general flow chart illustrating 
processing for copying by a data processing method 
according to the first embodiment of the present invention. 
Fig. 12 is a flow chart illustrating processing to check as 

20 to whether or not the data in the specified copy- 
destination volume can be arranged. Fig. 13 is a flow 
chart illustrating processing to copy data and possible 
data arrangement range information in a volume. Fig. 14 is 
a flow chart showing processing in a data copy request unit. 
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Fig. 15 is a flow chart showing processing in a data copy 
unit . 

In the data processing method according to the 
embodiment, first, as shown in Fig. 11, waiting for 
5 receiving a data copy request is executed upon initiation 
of processing (step 7050). The data copy request is 
delivered from the management computer 2000 in Fig. 6 via 
the network 2100. Then, the range information defined in 
the copy- destination volume requested, or the range 

10 information 3660 of the volume defined in Fig. 11 is 
checked as to whether or not it is in the possible 
arrangement range of data in the copy- source volume (step 
7100). If the information is beyond the range (step 7150), 
then, the result is defined as n out-of -range error" (step 

15 7200). Otherwise, if the judgment result in step 7100 is 
within the range (step 7150), the data in the volume and 
the possible data arrangement range information are copied 
in accordance with the above-stated request (step 7250). 

For example, when the range information defined in 

20 the copy-destination volume is the one shown in Fig. 10, 
and if the data in the volume 3100 in Fig. 8 is being 
copied, copying is executed as "within the range", since 
the possible arrangement range of data in the copy- source 
volume is "Company A" and the range information in company 



unit of the copy-destination volume is "Company A." 

Then, the result of step 7250 or 7200 is returned 
back to the management computer 2000, which is the 
requestor of the above-stated request (step 7300). 

Hereinafter, processing in step 7100 will be 
described in detail with reference to Fig. 12. 

The process is the one that is executed by the data 
arrangement range confirmation unit 3036 shown in Fig. 7. 

First, requested possible arrangement range 
information of data in a volume is acquired from the 
possible data arrangement range information 3010 (step 
8050). 

Then, a judgment is made, as a result of such 
acquisition, as to whether or not the possible arrangement 
range of the copy- source volume has been defined (step 
8100). If the range has not been defined, the process is 
terminated after designating as "within the possible 
arrangement range" (step 8250). This means copying can be 
done without problem unless a possible arrangement range is 
designated. However, if the above- stated possible 
arrangement range has not been defined, it may be so 
arranged that judgment should always be made as "out of the 
possible arrangement range." 

Conversely, in step 8100, if it is judged that the 



possible arrangement range has been defined, a judgment is 
made as to whether or not a group definition is included in 
the possible arrangement range (step 8150). If the 
definition is included, the group definition information 
3020 is acquired (step 8200). It should be noted that it 
is not always necessary to acquire all of the group 
definition information 3020, but only information of a 
group that is required for making a copy request can be 
acquired . 

Next, in step 8350, a volume range information 
acquisition request is sent to the storage device 2040 to 
which the copy-destination volume is defined (step 8350), 
and the result is received (step 8400). 

The volume range information supply unit 3684 of the 
copy-destination volume in the copy program 3680, upon 
receiving the volume range information acquisition request, 
receives a value of the volume range information 
acquisition request, and returns the result. 

Next, referring to the range information of the 
volume received, the data arrangement range conf irmation 
unit 3036 judges whether or not there is any range on which 
examination regarding if it is within the possible 
arrangement range or not has not been executed among the 
possible arrangement range information acquired in step 
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8050 (step 8450). If there is no such range, the unit 
terminates the processing, judging that the designated 
copy-destination volume is out of the possible arrangement 
range of the data in the copy-source volume (step 8500). 
5 In step 8450, if there are ranges that have not been 

searched as to whether or not it is in the possible 
arrangement range, one of such ranges is selected (step 
8600). Then, the unit 3036 judges whether or not the range 
thus selected is a group (step 8650). If it is a group, 

10 the unit 3036 judges, by using the information acquired in 
step 8200, whether or not the range information of the 
volume received in step 8400 is included in the range 
defined by the group (step 8700). On the other hand, in 
step 8650, if it is judged that the range is not a group, 

15 the unit 3036 judges whether or not the range information 
of the volume acquired in step 8600 is included in the 
range acquired in step 8400 (step 8750). If, in steps 8700 
and 8750, it is judged that the range is not in the 
possible data arrangement range, the processing is then 

20 continued starting from step 8450. However, if it is 

judged to be within the range, the unit 3036 terminates the 
processing, judging that the processing result is within 
the range (step 8800). 

Hereinafter, processing to copy data and the 
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possible data arrangement range information in a volume 
will be described with reference to Fig. 13. 

The processing is the one that is executed by the 
data copy unit 3034 shown in Fig. 7. 
5 First, the data copy unit 3034 checks whether or not 

a group is included in the possible data arrangement range 
(step 9050). If a group is included, information in the 
group definition information 3020 concerning groups is 
transferred to the storage device 2040 by using the 

10 communication device 3400 (step 9100). If the transfer is 
successful, the processing is resumed at step 9200. 
Otherwise, if the transfer is failed, the processing is 
resumed at step 9500 (step 9150). 

The reason for the above is that, if a group is 

15 included in a possible data arrangement range, the 

information needs to be taken up by the copy destination. 

Further, in step 9050, if it is judged that a group 
is not included, the processing is resumed at step 9200. 
In step 9200, a possible data arrangement range transfer 

20 request of data to be transferred is transmitted to the 
storage device 2040 (step 9200), and the result of the 
request is received from the storage device 2040 (step 
9230). If the result is successful, the processing is 
resumed at step 9300, or from step 9500 if the result is 



failure (step 9250). 

In step 9300, a check is made whether or not there 
is a volume from which all data have not been transferred 
to the storage device 2040 (step 9300). If there is no 
such volume, assuming that copying of all data is 
successful (step 9650), the processing is terminated. In 
the step 9300, if there is a volume from which all data 
have not been transferred to the storage device 2040, part 
of or all data that have not been transferred yet is 
selected (step 9400), and a transfer request of such 
selected data is transmitted to the communication device 
3400 (step 9400). Thereafter, the result of the above- 
stated request is received (step 9430), a judgment is made 
whether or not the transfer is successful (step 9450). If 
the transfer is successful, the processing is resumed at 
step 9300. In step 9450, if it is judged that processing 
is failed, a transfer interruption request is transmitted 
to the storage device 2040 (step 9500), assuming that the 
processing is failed (step 9550), the processing is 
terminated. 

Hereinafter, processing of the data copy request 
processor 3686 will be described with reference to Fig. 14. 

In the data copy request processor 3686, a 
processing request from the communication device 3400 is 
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acquired from the communication device 3850 (step 11050), 
At this time, if the processing request is not delivered, 
the processor 3686 will wait for the request until it is 
delivered* Thereafter, the processing request acquired in 
5 the above is judged whether or not it is a volume range 
information acquisition request (step 11100). If the 
request is the volume range information acquisition request, 
then, in step 11200, the processing request is transferred 
to the volume range information supply unit 3684. 

10 Otherwise, the above- stated request is transferred to the 
data copy unit 3682 in step 11150. In steps following the 
step 11150, a judgment is made whether or not the request 
is a processing interruption request (step 11400). If it 
is the processing interruption request, the processing is 

15 resumed at step 11050. Otherwise, the processing is 

resumed at step 11250. After transmitting the request to 
the volume range information supply unit in step 11250, the 
processing is resumed at step 11250. 

Thereafter, the result is received from the transfer 

20 source of the request (step 11250), the result is 

transmitted to the communication device 3400 via the 
communication device 3850 (step 11300), and the processing 
is resumed at step 11050. 

Hereinafter, the processing of the data copy unit 
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3682 will be described with reference to Fig. 15. 

The data copy unit 3682 is included, as shown in Fig. 
7 , in a copy program of the storage device 2040 in the 
copy-destination volume. 
5 In the processing of the data copy unit 3682, a 

judgment is made whether or not the received request is a 
transfer interruption request (step 12050). If it is the 
transfer interruption request, the possible data 
arrangement range information in the volume designated in 
10 step 12100 is initialized (step 12100). Then, the above- 
stated volume is initialized (step 12150) and the 
processing is terminated. The reason for this 
initialization is not to leave any in-process data in the 
volume. 

15 On the other hand, if it is judged, in step 12050, 

that the request is not a transfer interruption request , a 
judgment is made, in step 12250, whether or not the request 
is a group definition information transfer request. If it 
is the group definition information transfer request, a 

20 check is made, in step 12300, whether the designated group 
has been defined in the group definition information 3640. 
If the designated group has not been defined in the group 
definition information 3640, then, in step 12400 , the group 
is added to the group definition information 3640, and the 
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processing is resumed at step 12650. In step 12300, if it 
is judged that the designated group has not been defined, 
then, a judgment is made, in step 12 350, whether or not the 
definition is the same as that of the group that has been 
5 already defined. If so, a return value indicating 

successful processing is transmitted to the data copy 
request processor 3686 (step 12750), and the processing is 
terminated. 

If it is judged, in step 12350, that the definitions 
10 are not the same, then, in step 12800, a return value 

indicating processing failure is transmitted to the data 
copy request processor 3686, and the processing is 
terminated. It should be noted, here, that the group 
definition information shall be consistent and any changes 
15 thereof shall not be permitted during the processing, and 
if any inconsistency is available, the information is 
handled as an error. 

On the other hand, in step 12250, if the received 
request is not a group definition information transfer 
20 request , a judgment is made whether or not the acquired 

request is a transfer request of possible data arrangement 
range information (step 12450). If the request is a 
transfer request of possible data arrangement range 
information, then the possible data arrangement range 
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information that has been transferred along with the 
request is written on the possible data arrangement range 
information of a volume in the possible data arrangement 
range information 3620 (step 12500), and the processing is 

5 resumed at the step 12650. 

The reason for the above is that the possible data 
arrangement range information needs to be taken up by the 
copy-destination volume. 

In step 12450, if the request is judged not to be a 

10 transfer request of possible data arrangement range 

information, a judgment is made whether or not the request 
is a data transfer request (step 12550). If it is a data 
transfer request, then, the data designated in the above- 
stated request is written in a designated position of the 

15 volume 3700 or the volume 3750 (step 12600), and the 
processing is resumed at step 12650. 

If the processing is successful in step 12650, the 
processing is resumed at step 12750. If the processing is 
failed in stepl2650 # the processing is resumed at step 

20 12700. In step 12750, a return value indicating successful 
processing is transmitted back to the data copy request 
processor 3686, and the processing is terminated. In step 
12700, a return value indicating failed processing is 
transmitted back to the data copy request processor 3686, 
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and the processing is terminated. 

The possible data arrangement range information 3010 
and 3620, the group definition information 3020 and 3640, 
the volume range information 3660 , the data copy request 
5 processors 3032 and 3686, the data arrangement range 

confirmation unit 3036, the volume range information supply 
unit 3684, and the data copy programs 3030 and 3680 shown 
in Fig. 7 are not always have to be located in a storage 
device as shown in Fig. 7, but they may be located in the 

10 management computer 2000, or any other device that is 

connected to the host computer 2010, the host computer 2020 
or the network 2100. 

Further, the data copy programs 3030 and 3680 may be 
mounted not in the form of software, but in the form of 

15 hardware. Furthermore, the data copy programs 3030 and 

3680, the possible data arrangement range information 3010 
and 3620, the group definition information 3020 and 3640, 
and the volume range information 3660 may be stored in a 
storage device that is directly connected to any one of the 

20 management computer 2000, and the host computers 2010, 2020. 

With the first embodiment, although the example is 
described wherein a range is grouped, designation of 
possible data arrangement range in group unit is enabled, 
and group definition information is transferred at the time 



of transferring data or the possible data arrangement range, 
the group definition information may not always be 
transferred. In this case, if such group is not defined in 
the storage device to which data is copied, the transfer 
processing is only needed to abort as abnormality occurs. 
In addition, designation in group unit may not be always 
required. 

Furthermore, in the flow of processing shown in Fig. 
15, initialization of the volumes and the possible data 
arrangement range information in steps 12100 and 12150 can 
be omitted. Alternatively, only the written data may be 
initialized, or no arrangement may be taken for this 
purpose. 

[Second Embodiment] 

Hereinafter, a second embodiment according to the 
present invention will be described with reference to Figs. 
16 through 22. 

The first embodiment has been referred to an example 
wherein range information is defined for a volume, and a 
check is made whether or not copying can be made by 
defining a possible data arrangement range for data located 
within the volume. 

The second preferred embodiment refers to an example 
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wherein a copy- source storage device has a storage area 
configured with a logical volume, a file system and a file, 
and data is copied in a storage area in which range 
information is designated to a logical volume of the copy- 
5 destination storage device. 

The entire computer system is configured to include 
a host computer 2010, a storage device 2030 and a storage 
device 2040, which are connected to a network 2100, as is 
the case with the first preferred embodiment. 

10 Fig. 16 is an internal configuration diagram of a 

host computer associated with a second embodiment of the 
present invention. Fig. 17 is a diagram showing a 
configuration of copy- source storage area. Fig. 18 is a 
diagram showing logical volume definition information. Fig. 

15 19 is a diagram showing file system configuration 
information. Fig. 20 is a diagram showing range 
information of a logical volume. 

In the second embodiment, a data copy program runs 
on the host computer 2010, and information associated with 

20 a mutual hierarchy of storage areas is also stored in the 
host computer 2010. 

The host computer 2010 is provided with an input 
device 13000, a communication device 13200, a CPU 13100, an 
output device 13250, and a memory 13150, which are 
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connected to one another over a communication path 13400. 
Further, the communication device 13200 is connected to 
another network via the network 2100. The memory 13150 
includes a data copy program 13850, possible data 
5 arrangement range information 13700, logical volume 

definition information 13750, file system configuration 
information 13760 and logical volume range information 
13800. The data copy program 13850 includes a request 
acceptance unit 13500, a data copy request processor 13550, 

10 a data copy unit 13600 and a data arrangement range 
confirmation unit 13650. 

The data copy program 13850 is stored in the storage 
device 2030 or the storage device 2040 that is connected to 
the network 2100, read by the memory 13150 according to a 

15 request from the input device 13000, and then executed by 
the CPU 13100. 

The logical volume range information 13800, the 
possible data arrangement range information 13700 and the 
logical volume definition information 13750 are stored in 

20 the storage device 2030 or the storage device 2040 that is 
connected to the network 2100, read in the memory 13150 as 
required, and used at the time of executing processing of 
the data copy program 13850. 

The logical volume definition information 13150 is 
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information indicating how a logical volume is configured 
by using which volume of which storage device. 

The file system configuration information 13760 is 
information indicating how a file system is arranged in a 
5 logical volume. 

The logical volume range information 13800 refers to 
a range that permits arrangement of data to be stored in 
each logical volume. 

The request acceptance unit 13500 receives a request 
10 from the input device 13000, delivers a request for a copy 
to the data copy request processor 13550, receives a 
request processing result from the data copy request 
processor 13550, and outputs the result to the output 
device 13250. 

15 The data copy request processor 13550 issues a 

request to the data arrangement range confirmation unit 
13650 to check whether or not the position of the copy- 
destination logical volume is in the possible data 
arrangement range of the copy-source logical volume. If it 

20 is judged that the request processing result is within the 
range, the processor 13550 initiates copying of the data 
and the possible data arrangement range information between 
the logical volumes in the data copy unit 13600 according 
to the request. Otherwise, if the request processing 
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result is out of the range, the processor 13550 returns an 

error indicating the result is out of the range to the 

request acceptance unit 13500. 

In this embodiment, a logical range is assumedly the 
5 same as that of Fig. 2, and a copy- source storage area is 

of a configuration shown in Fig. 17. 

More specifically, the logical volume F shall 

include the file system A and the file system B, and 

further the file system A shall incorporate the file E and 
10 the file F. Further, the possible data arrangement range 

of the file E shall be "Department D" , and that of the file 

F shall be "Office B." In addition, the possible data 

arrangement range of all files that are included in the 

file system B shall be "Company A." 
15 The logical volume definition information 13150 

shall be supposed to be the cross-referencing combinations 

with volumes as shown in Fig. 18. 

Further, the file system configuration information 

13760 shall be arranged on the logical volume as shown in 
20 Fig. 19. 

Furthermore, it shall be supposed that the range 
information 13800 of the logical volume is defined to have 
a range that allows for arrangement of data to be stored in 
respective logical volume, as shown in Fig. 20. 
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Under such circumstances, a case is assumed where 
data in the logical volume E is copied to the logical 
volume F, the logical volume G and the logical volume H. 

First, it shall be supposed that the file system A 
5 is designated as a storage area, and the data is copied to 
the volume F. 

In this case, typical range information of the file 
system A will be calculated. Since the file E and the file 
F are included in the file system A, and the possible data 
10 arrangement ranges of the files are "Department D" and 

"Office B", respectively, the typical range information of 
the file system A should be the narrower, i.e., "Department 
D." 

As shown in Fig. 18, since the range information of 
15 the logical volume F is "Office B", the range information 
of the logical volume F is not in the typical range 
information, "Department D," of the file system A, and thus 
the copying will not be permitted. 

Next, it shall be supposed that the logical volume E 
20 is designated as a storage area, and its data is copied to 
the logical volume G. 

In this case, typical range information of the 
logical volume E will be calculated. The logical volume E 
is configured, as shown in Figs. 17 and 19, with the file 
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system A and the file system B, the typical range 
information of the file system A is "Department D" , and the 
typical range information of the file system B is "Company 
A." Therefore, the typical range information of the 
5 logical volume E should be the narrower, i.e., "Department 
D. " 

As shown in Fig. 18, the range information of the 
logical volume G is also "Office B" , the range information 
of the logical volume F is not in the typical range 

10 information "Department D w of the logical volume G, and 
thus the copying will not be permitted. 

When the logical volume E is designated as a storage 
area, and its data is copied to the logical volume H, the 
range information of the logical volume H is "Department D" 

15 as shown in Fig. 18, the range information of the logical 

volume H is in the typical range information "Department D" 
of the logical volume G, and thus the copying will be 
permitted. Here, when the range information and the 
typical range information coincide with each other, it is 

20 understood that the range information should be located 

within the typical range information, as a matter of course. 

Hereinafter, processing of the data arrangement 
range confirmation unit 13650 will be described with 
reference to Fig. 21. 



First, possible arrangement range information of 
data located in a copy- source logical volume is acquired 
from the possible data arrangement range 13700 (step 16050). 
In this case, when a storage area has been 
5 designated, the typical range information of the storage 
area will be obtained. The method for obtaining the 
typical range information will be described in detail later. 

Thereafter, if the possible data arrangement range 
information acquired has been defined (step 16100), then, 
10 the range information of the copy-destination logical 
volume is acquired (step 16150). 

On the other hand, in step 16100, if the possible 
data arrangement range acquired in step 16050 has not been 
defined, the copy-destination logical volume should be 
15 considered to be in the range which allows for copying data 
in the copy-source logical volume (step 16550), and the 
processing is terminated. 

In the processing following step 16150, a judgment 
will be made as to whether or not there is any storage 
20 device, among storage devices acquired in step 16050, to 

which processing following step 16250 has not been applied 
(step 16200). If such device is not available, the 
processing will be resumed at step 16450. In step 16200, 
if a storage device to which processing following the step 



16250 has not been applied is found, one of the above- 
stated storage devices is selected (step 16250). 

Next, a check for the storage device selected in 
step 16250 is made as to whether or not there is any range, 
5 in the range of the step 16050, to which processing 

following step 16350 has not been applied (step 16300). If 
such range is not available, the situation is determined to 
be "out of range" (step 16500), and the processing is 
terminated. In step 16250, if a judgment is made that 

10 there is a range to which processing following step 16350 
has not bee applied, one of the possible data arrangement 
ranges to which processing following step 16500 has not 
been applied is selected (step 16350). 

Thereafter, a judgment is made as to whether or not 

15 the range information of the copy-destination logical 
volume that is selected in the foregoing step 16250 is 
included in the selected range (step 16400). If it is 
judged that the information is not included, the processing 
is resumed at step 16300. Otherwise, it is judged that the 

20 information is included, the processing is resumed at step 
16200. 

In the second embodiment, it is so arranged that the 
data copy program 13850, the logical volume range 
information 13800, the possible data arrangement range 
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information 13700, the logical volume definition 
information 13750 and the file system configuration 
information 13760 are stored in the storage device 2030 or 
the storage device 2040 that is connected to the network 
5 2100. However, they may be stored in a storage device that 
are incorporated in or directly connected to the host 
computer 2010, or in any storage device connected to the 
network 2100. 

Hereinafter, processing for obtaining typical range 
10 information will be described with reference to Fig. 22. 

Fig. 22 is a diagram showing an example of typical 
range information in the second embodiment of the present 
invention . 

As shown in Fig. 22, the memory hierarchy of the 
15 second embodiment is shown in a column 24000, and more 
specifically, the hierarchy is configured as shown in a 
column 24040. 

Further, in the column 24040, a possible data 
arrangement range and typical range information associated 
20 with respective data or storage areas are shown. 

Here, it should be kept in mind that the typical 
range information of the nth (n ^ 2) memory hierarchy will 
be the narrower logical range of the typical range 
information of the (n-l)th column. 
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Here, for example, it shall be supposed that the 
typical range information of the file system A is obtained. 
At this time, if the typical range information of the file 
system A has already been obtained and the information has 
5 been saved, such information may be used. 

On the other hand, if the typical range information 
of the file system A has not been obtained yet, a check 
will be implemented to an upper storage hierarchy that 
configures the information. Since the file system A 

10 includes the file E and the file F, a check will be made 

for the possible data arrangement range of these files, and 
the logical range having the narrowest range may be 
determined to be the typical range information of the file 
system A. In this case, however, since the possible data 

15 arrangement range of the file E is "Department D" and that 
of the file F is "Office B", the typical range information 
of the file system A should be the narrower range or 
"Department D. " 

As described in the above, typical range information 

20 of a certain storage area can be obtained, by examining 
storage areas in the upper hierarchy, and taking up the 
typical range information of a storage area in the upper 
hierarchy, or the narrower possible data arrangement range 
of the data. 
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[Third Embodiment] 

Hereinafter, a third embodiment according to the 
present invention will be described with reference to Figs. 
5 23 through 27. 

The third preferred embodiment refers to a method 
for managing a storage area which searches for a volume 
that can be copied or moved, by designating a certain 
volume and by considering a possible data arrangement range 
10 and data capacity of data located in such volume. 

Fig. 2 3 is a diagram showing an internal 
configuration of a management computer according to the 
third embodiment of the present invention. Fig. 24 is a 
diagram showing a possible data arrangement range according 
15 to the third embodiment of the present invention. Fig. 25 
is a diagram showing a volume information list. Fig. 26 is 
a diagram showing range information of volumes. Fig. 27 is 
a flow chart illustrating processing in a volume selection 
unit . 

20 The present embodiment has a configuration similar 

to that of the first embodiment shown in Fig. 6, and a 
program to select a volume is implemented by a management 
computer 2000. 

The management computer 2000, as shown in Fig. 23, 
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includes an input device 28000, a communication device 
28050, a CPU 28100, an output device 28150, and a memory 
28200, which are connected to one another over a 
communication path 28300. 
5 The communication device 28050 is connected to the 

network 2100. In addition, the memory 28200 includes a 
volume selection program 28800, possible data arrangement 
range information 28610, a volume list 28600, and volume 
range information 28650. Further, the volume selection 

10 program 28800 includes a request acceptance unit 28500 and 
a volume selection unit 28550. The volume selection 
program 28800 is a program that is stored in the storage 
device 2030 or the storage device 2040 that is connected to 
the network 2100, read into the memory 28200, and executed 

15 by the CPU 28100. 

The volume list information 28600 and the volume 
range information 28650 are data that is stored in the 
storage device 2030 or the storage device 2040 that is 
connected to the network 2100, and is used at the time of 

20 executing the volume selection program 28000. 

The request acceptance unit 28500 accepts a volume 
assignment request from the input device 28000, and 
delivers the request to the volume selection unit 28550. 
Then, the unit 28500 receives a processing result of the 
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volume selection unit 28550, and outputs the result to the 
output device 28150. 

The possible data arrangement range information 
28610 of the present embodiment is shown according to 
5 volumes as shown in Fig. 24. For example, the possible 
data arrangement range of all data in the volume A is 
"Office B." 

The list of volumes information 28600 consists of 
information as to which storage device a volume belongs , 
10 and the status and free space of the volume, as shown in 
Fig. 25. 

For example. Fig. 25 shows "Volume A" belongs to 
"Storage Device 2030", the status is "In use", and the free 
space is "8124" MB. 
15 It should be noted that, here, data shall newly not 

be copied or moved on or to the volume in use. 

The volume range information 28650 is used to define 
range information for each volume, and, in the example 
shown in Fig. 26, the definition is made starting from a 
20 volume with a wider logical range to a volume with a 
narrower logical range . 

Now, under such circumstances, it is assumed that 
the volume A is designated and a volume to which the volume 
A is copied or moved is searched. 
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A user will designate the volume A through a control 
console (not shown in the diagram) via the network 2100. 

In this case, the possible data arrangement range of 
data in the volume A is "Office B" as shown in Fig. 24, and 
5 the free space is "8124" MB as shown in Fig. 25. 

Further, the range information of the volume D in 
terms of office unit is "Office B" as shown in Fig. 26, the 
status of use is "Unused", and the free space is "13328" MB. 

Consequently, since the possible data arrangement 
10 range of the data in the volume A is included in the range 
information in office unit of the volume D, free space is 
sufficiently available and the status of use is "Unused", 
the volume D will be a candidate to be selected. 

Hereinafter, processing of the volume selection 
15 program 28800 in the management computer 2000 will be 
described with reference to Fig. 27. 

At the time of initiating the processing, the 
program 28800 receives, as parameters, the capacity of a 
volume to be assigned and the possible data arrangement 
20 range information of the data. 

First, a judgment is made as to whether or not there 
is an unsearched volume is available in the list of volumes 
28600 (step 31150) . 

If there is no unsearched volume, the processing is 
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terminated. 

If unsearched volumes are available, one of the 
volumes is selected (step 31200). 

Then, the range information of the volume is 
5 acquired by referring to the volume range information 28650 
shown in Fig. 26. 

A judgment is made as to whether or not the possible 
data arrangement range information that is delivered as a 
parameter exists in the volume range information 28650. If 
10 the information is not available in the volume range 

information 28650, then, the processing is resumed at the 
step 31150 to search for the next volume. 

When the possible data arrangement range information 
exists in the volume range information 28650, then, 
15 referencing is made to the list of volumes information 

28600 in Fig. 25, and a judgment is made as to whether the 
volume is unused or not (step 31350). 

When the volume is not "unused", the processing is 
resumed at step 31150 to search for the next volume. 
20 When the volume is "unused", then, the capacity of 

the data delivered in parameter is compared to the capacity 
of the volume to make a judgment as to whether the volume 
capacity is enough or not (step 31400). 

If the volume capacity is not enough, the processing 



is resumed at step 31150 to search for the next volume. 

If the volume capacity is enough, the volume is 
selected and necessary information is displayed on a 
control console, etc. (step 31450). 
5 In the third embodiment, the volume selection 

program 28800 in the memory 28200, list of volumes 
information 28600, and volume range information 28650 are 
stored in the storage device 2030 or the storage device 
2040. They may however be stored in a storage device that 

10 is incorporated in or directly connected to the management 
computer 2000, or in any storage device connected to the 
network 2100. 

In addition, the above- stated program and data may 
be decentralized and stored in the management computer 2000, 

15 the host computers 2010 and 2020, and the storage devices 
2030 and 2040 so that they may jointly operate. For 
example, a volume selection section that is located in the 
memory 28200 on the management computer 2000 may designate 
conditions to a volume selection unit that is located on 

20 the storage devices 2030 and 2040, inquires whether or not 
a volume that satisfies such conditions, searches for a 
volume that satisfies such conditions on the storage 
devices 2030 and 2040, and returns the search result. 

Further, in the third embodiment, the capacity and 
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the possible data arrangement range are designated at the 
time of assigning a volume, but items to be designated are 
not limited to such items. For example, the number of 
physical disks or the number of redundant disks that 
5 configure a volume may be designated along with the items 
stated above, or an average request performance value may 
be designated. In addition, upon designation of capacity, 
one or more usable volumes may be displayed according to 
possible data arrangement ranges. Alternatively, upon 

10 designation of a volume, one or more volumes having the 

same possible data arrangement range as that of the above- 
stated volume may be displayed. 

In the third embodiment, processing is terminated 
when one volume that satisfies the designated conditions is 

15 found. Alternatively, however, a search may be made for 

all volumes or the number of volumes designated in advance 
that satisfy the designated conditions. At this time, 
search results may be exposed and displayed to users so 
that users can choose one volume among volumes thus 

20 displayed. Further, when search results are displayed, the 
display method may be changed depending on which possible 
data arrangement ranges volumes are included in. 

In the embodiment, a method for searching for a 
volume is shown, but a search may be made for storage areas 
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including a file system and logical volumes. Further, a 
file system, a logical volume or a volume may be searched 
for at a time. Further, a search may be made, by 
designating a file, for a file system which is in the 
5 possible data arrangement range of the above- stated file 
and has free space exceeding the size of the file. 
Alternatively, by designating both the capacity and the 
possible data arrangement range, a search may be made for 
all volumes which, are in the above- stated possible data 

10 arrangement range and whose total capacity exceeds the 
above-stated capacity as a result of such search. 

In the embodiment, a method for searching a copiable 
storage area by designating the data range information and 
the free space. Alternatively, however, the embodiment may 

15 easily be applied to a logic wherein, by designating the 
possible data arrangement range and the capacity at the 
time of making a copy, copying is permitted when the range 
information of the copy-destination storage area is 
included in the possible data arrangement range and there 

20 is free space in the copy-destination storage area. 



[Fourth Embodiment] 

Hereinafter, a fourth embodiment according to the 
present invention will be described with reference to Figs. 
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28 through 32. Fig. 28 is a configuration diagram of a 
computer system associated with the fourth embodiment of 
the present invention. Fig. 29 is an internal 
configuration diagram of a host computer associated with 
5 the fourth embodiment of the present invention. Fig. 30 is 
a diagram showing device-belonging information. Fig. 31 is 
a diagram showing a possible data arrangement range and 
typical range information associated with the fourth 
embodiment of the present invention. Fig. 32 is a flow 
10 chart showing processing in the access control* confirmation 
unit 32600. 

The fourth embodiment refers to a method for 
managing a storage area which, for a case that an access is 
made to a certain storage area from a client computer, 
15 permits or does not permit data accessing by comparing the 
device-belonging information of the client computer with 
the possible data arrangement range of the data to be 
accessed. 

Regarding the system configuration in the embodiment, 
20 it shall be so understood that, as shown in Fig. 28, a 

client computer 17300, a host computer 17100, and a host 
computer 17200 are connected each other via a network 17000, 
and a storage device 17250 is connected to the host 
computer 17100, and a storage device 17150 is connected to 



the host computer 17200, respectively. 

Further, the client computer 17300 will make an 
access to data in a storage area of the storage device 
17150 to which the host computer 17200 is connected. 

As for the internal configuration of the computer 
17200, a CPU 32000, a communication device 32050, a 
communication device 32100 and a memory 32159 exist, and 
they are connected each other via a communication path 
32150, as shown in Fig. 29. 

Further, the communication device 32050 is connected 
to the network 17000, and the communication device 32100 is 
connected to the communication path 17600. In addition, in 
the memory 32150, an access permit program 32800, possible 
data arrangement range information 32650 and device - 
belonging information 32750 exist. 

Furthermore, in the access permit program 32800, a 
request acceptance unit 32500 and a access control 
conformation unit 32600 exist. 

The access permit program 32800 is a program stored 
in the storage device 17250 that is connected to the 
communication device 17600, read into the memory 32150, and 
executed by the CPU 32000. 

The possible data arrangement range information 
32650 and the device-belonging information 32750 are data 



* • 

- 56 - 

that is stored in the storage device 17 2 50 connected to the 
communication path 17600, and is used when the access range 
setting program 32800 is executed. 

The device-belonging information 32750 is 
5 information that indicates a logical belonging range at the 
time of making a data access from a client computer, as 
shown in Fig. 30. 

Further, the storage device 17150 has a storage 
device hierarchy comprising a logical volume I, a file 
10 system D, a file E and a file F as shown in Fig. 31, and 

the possible data arrangement range of the file E shall be 
"Department R", while the possible data arrangement range 
of the file F shall be "Office P." The range information 
of both the logical volume I and the file system D is 
15 "Department R . " 

Now, it shall be supposed that an access is made to 
the file E from the client computer A. 

The device -belonging information of the client 
computer A is "Office P", and that of the file E is 
20 "Department R." More specifically, the device -belonging 

information of the client computer A is not included in the 
possible data arrangement range of the file E. 

The above fact means that the client computer A may 
be used by persons other than those in Department R, and 
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that an access is made to the file E which should not be 
accessed by persons other than those in Department R. 
Consequently, the access is rejected in this case. 

In addition, the above fact also means that an 
5 access is rejected when the client computer A tries to 

obtain an access permission under the file system D level. 

On the other hand, the device-belonging information 
of the client computer B is "Department R" , and accessing 
to all data in the logical volume I is possible from the 
10 client computer B. 

Hereinafter, processing of the access control 
confirmation unit 32600 will be described with reference to 
Fig. 32. 

First, upon acceptance of an access request, the 
15 possible data arrangement range information 326 50 is 
acquired (step 37000). 

A judgment is made as to whether a possible data 
arrangement range has been defined or not (step 37050), and 
if it has not been defined, an access is permitted (step 
20 37400). More specifically, it is assumed that, when any 
possible data arrangement range is not defined, accessing 
is possible from all client computers. 

Thereafter, the device-belonging information 327 50 
of a client computer to which an access is being made is 



- 58 - 



acquired (step 37100). 

Then, a judgment is made as to whether the device- 
belonging information 32750 is within the possible data 
arrangement range 32650 or not (step 37150), and if the 
device-belonging information 32750 is in the possible data 
arrangement range 32650, accessing to the data is permitted 
(step 37400), or if the device-belonging information 32750 
is not in the possible data arrangement range 32650, 
accessing is rejected (step 37450). 

In the fourth embodiment, all of the access permit 
program 32800, the possible data arrangement information 
32650, and the device-belonging information 32750 are not 
necessary to be stored in the storage device 17250 that is 
connected to the communication path 17600, but they may be 
located on a storage device incorporated in the host 
computer 17 200 or any other storage devices connected to 
the network 17000. 

[Fifth Embodiment] 

Hereinafter, a fifth embodiment according to the 
present invention will be described with reference to Figs. 
33 through 36. 

The fifth embodiment refers to description of a user 
interface that is provided to execute the data processing 
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method and storage area management method of the present 
invention that have been referred to in the foregoing parts. 

Fig. 33 is a diagram showing a display object which 
displays a logical range that is intended for range 
5 information on a possible data arrangement range and a 

storage area. Fig. 34 is a diagram showing an example of a 
display object displaying a directory configuration to be 
accessed from a client computer. Fig. 35 is a diagram 
showing an example of a display object which expresses a 
10 file information list in a table format. 

In order to execute the data processing method and 
the storage area management method according to the present 
invention, for example, there is provided a graphical 
interface which is used to display screens described 
15 hereinafter on a display unit that is connected to a 

management computer of the computer system shown in Fig. 6 
or to a client computer which is not shown in the diagram 
but is connected to the network 2100, or can be operated 
with input devices such as a mouse and a keyboard. 
20 In a screen which displays a logical range, the 

logical range is displayed in a tree structure as shown in 
Fig. 33. The logical range displayed should be the range 
intended for the possible data arrangement range. 

As a logical range is located closer to the root of 
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the tree, the logical range takes a superordinate position, 
and as it is located closer to the leaf part of the tree, 
the logical range takes a subordinate position. In Fig. 33, 
the range "Japan" is in the superordinate position, and 
5 ranges of "Company A" and "Company B" are in the 

subordinate positions. Symbol " + " marked at respective 
nodes indicates that its subordinate nodes are not shown, 
and symbol "-" shows that such subordinate nodes are shown. 
And, pointing a node with a mouse and clicking it toggle 
10 indications " + " and 

In addition, a display area 39500 is a special area, 
and it shows that the possible arrangement range is 
unlimited. 

Further, a box 39300 shows that the display area of 
15 Fig. 33 is selected by a user to be in an active status. 

It shall be understood that a user has a file with a 
directory configuration shown in Fig. 34, and that the user 
can make an access to the file. On the screen, a tree 
structure of the directory is displayed, and, for example, 
20 the directory "Specifications" has subordinate directories 
such as "Device A" and "Device B." 

The meaning of symbols "+" and "-" marked at nodes 
is the same as that of Fig. 33. A box 40150 shows that the 
display are in Fig. 34 is selected by a user to be in the 
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active status . 

When the "Device A" is selected with a mouse, and 
then a command "display the file list" is entered, a list 
of files in the directory of the "Device A" , and a list of 

5 the possible data arrangement range, the format, the size, 
etc. of the files will be displayed as shown in Fig. 35. 

Thereafter, a row 41000 for a file name shown in Fig. 
35 is selected with a mouse, and the row thus selected is 
drugged and dropped on the node of the display object which 

10 displays the logical range displayed on the same display 
unit as that shown in Fig. 33. This will enable the 
setting of the possible data arrangement range for the file 
having the file name stated above that is drugged and 
dropped. For example, by drugging and dropping a file 

15 having a file name "Basic Specifications" onto a node 

displayed as "Office B" , the data arrangement range will be 
"Office B", and thus the corresponding portion of a column 
41050 is rewritten. 

Here, the term "drug and drop" refers to a series of 

20 operations , wherein the pointer of a pointing device is 

moved to the pointing-out area of an object to be displayed, 
the object is selected by pressing a mouse button, the 
object is moved to the pointing-out area of another object 
to be displayed while the button is pressed and held, and 
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finally the mouse button is released. 

Conversely, it may be so arranged that a possible 
data arrangement range of a file can be set by drugging and 
dropping the node of the logical range shown in Fig. 33 
5 onto the row which indicates a file in the file list shown 
in Fig. 35. 

It should be noted that, when a file name is drugged 
and dropped onto the display area 39500, the status of "no 
range designated" will be established. 

10 Alternatively, it may be so arranged that, by 

selecting a directory from a display object showing 
directory structures in Fig. 34, and drugging and dropping 
the directory onto a node shown in Fig. 33, setting or 
canceling of a possible data arrangement range for all 

15 files in the directory can be made. 

Further, when a row showing a file in Fig. 35 is 
selected, the display method of a portion corresponding to 
the possible data arrangement range defined for the file in 
the logical range shown in Fig. 33 may be changed. 

20 Furthermore, it may be so arranged that, when a 

directory or a file that designates a possible data 
arrangement range is selected, two or more directories or 
files are selected, and possible data arrangement ranges of 
two or more files or directories can be set at a time. 
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When a possible data arrangement range of a file is 
designated by using such user interface, it may be so 
arranged that, if the range is inconsistent with a storage 
area (e.g. a file system or a logical volume, and range 
5 information defined for a volume, etc. in a storage device) 
which includes the designated file, then, the designation 
of such possible data arrangement range is terminated as an 
error, a warning is displayed, or an inquiry is made as to 
whether the setting of the possible data arrangement range 
10 is actually executed or not. 

For this purpose, a search can be executed whether 
or not the range information of the storage area including 
the file is smaller than the designated possible data 
arrangement range. 
15 Hereinafter, a utility screen which is convenient at 

the time of using the data processing method and the 
storage area management method of the present invention 
will be described with reference to Fig. 36. 

Fig. 36 is a diagram showing a utility screen that 
20 is offered when the data processing method and the storage 
area management method of the present invention is used. 

In the utility screen, a storage area belonging to a 
hierarchy is displayed according to the hierarchies of 
storage area. 
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The horizontal lines show that the intended objects 
of the lower storage area include storage areas or data of 
the upper storage area. 

For example, a file 42400 of "Function 
5 Specifications" and a file 42450 of "Basic Specifications" 
are included in a file system 42750 of a "File System A." 

The character string 42920 at the lower part of the 
file 42400 "Function Specification" shows that the possible 
data arrangement range is "Office B." 
10 Likewise, an upper box 42500 of the "File System A" 

is typical range information of the file system. This 
should be the narrowest possible data arrangement range 
among those in a file belonging to the file system "File 
System A." Here, since the possible data arrangement range 
15 of the file "Function Specifications" was "Office B" and 
the possible data arrangement range of the function 
specifications was "Company A", the range should be the 
narrower range, or "Office B." At this time, the file 
42400 of "Function Specifications" which has narrower 
20 possible data arrangement range "Office B" is shown in bold 
lines as shown in Fig. 36, or the display color is changed. 

Further, what is located at the lower part of a box 
42750 is range information that is defined for the file 
system "File System A." In this case, since it is defined 
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as "without designation", no particular designation is made. 

As stated in the above, displaying is sequentially 
made down to the volume which is in the lowest hierarchy 
for its typical range information, name of storage area, 
5 and defined range information. 

At this time, the storage area or data which is 
indicated in a bold line box will have the typical range 
information and the possible data arrangement range in the 
narrowest logical range. More specifically, it is possible 
10 to say that a daisy chain of such storage areas or data 

shown with bold lines forms a "critical" part at the time 
of making a copy to other storages areas. Therefore, 
should any error occur during a copying or a migration 
process, verification on the storage area shown in bold 
15 lines or the daisy chain of data will reveal the storage 

area portion or data that caused such unsuccessful copying 
or migration. This can be used when a storage area or data 
is to be re-arranged. 

For example, it shall be supposed that, in the 
20 example shown in Fig. 36, "Volume A" is specified and 
copying to another volume having the range information 
"Company A" is tried. In this case, since the typical 
range information of the "Volume A" is "Office B n , copying 
will not be feasible. Eventually, it is found that the 



cause lies in the fact that the possible data arrangement 
range of the file "Function Specifications" is "Office B." 

In addition, since the range information of a 
storage area is displayed, verification is possible, should 
an error occur in trying to make a copy from other storage 
area to the storage area presently displayed. Further, 
should an error due to inconsistency occur at the time of 
defining range information of a storage area or a possible 
data arrangement range of data, the cause can be 
investigated . 

In the data processing method and the storage area 
management method of the present invention, if the range 
information defined to a storage area B included in a 
certain storage area A is considered to be logically wider 
than the range information defined to the storage area A, 
it should be arranged that the processing is treated as an 
error or a warning is issued. This includes a case, for 
example, where the range information of a logical volume is 
"Office B", and the range information of a file system in 
that volume is "Department D." In such a case, data in the 
logical volume may be accessed by all persons in Office B. 
Should such situation happen, the cause can easily be 
inquired into by using the utility screen shown in Fig. 36. 
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[Other Embodiments] 

In the first and the second embodiment, a possible 
data arrangement range and the range information of a 
storage area were verified at the time of making a copy. 
5 However, such verification processing may be performed, not 
at the time of making a copy, but at the time of defining 
that copying will be made in the future by using backup 
software, etc. 

Further, at the time of copying volume data in the 
10 first embodiment, verification was made on the possible 
data arrangement range and the volume range information, 
but verification is conducted within a data copy program in 
the copy-source storage device. 

In the first and the second embodiment, at the time 
15 of copying data in a storage device, if the possible data 

arrangement range does not include the range information of 
the storage device, the copy processing is aborted as an 
error. However, a user may judge whether copying should be 
executed or not after confirming the user that the copying 
20 is made beyond the possible arrangement range of the data, 
or the copy processing may be executed as requested by 
warning a user of such processing. 

In the first and the second embodiment, there was 
explained an example wherein, at the time of copying data 



between volumes, logical volumes and file systems in a 
storage device, the possible arrangement range of the data 
is confirmed. However, at the time of copying a file or a 
volume to a removable external storage device, it may also 
5 be arranged to examine as to whether or not the range 
information of a pre-defined external storage device is 
within the range of the storage area to be copied. The 
typical examples include an arrangement wherein, for a 
floppy (registered trademark) disk drive, defining it 

10 always to be "external" will prevent any intra -company 
secret data from being copied to any floppy (registered 
trademark) disk. 

At the time of making data copying between storage 
devices, pre-defined processing may be executed if the 

15 range information of the copy-destination storage area is 
beyond the possible arrangement range of data in the copy- 
source storage area, and copying data between the storage 
devices may be executed when the processing is successful, 
or the copying may not be executed when the processing is 

20 failed. The pre-defined processing includes, for example, 
encryption of part or all of data, examination as to 
whether or not an authorization has been given to bring 
data beyond a possible arrangement range, displaying of 
pre-defined messages, and recording of history of copy made 
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beyond a possible arrangement range. 

By providing two or more possible data arrangement 
range to any data, different definitions may be given to 
each range in such a manner that copying is prohibited at 
5 the time of making a copy of data beyond the range; a 

warning is issued, but copy is executed; or processing is 
executed in advance at the time of making a copy. For 
example, the definitions include that a record is taken for 
a copy being made beyond a department, a warning is issued 

10 for copy being made beyond an office, and copying to 
outside a company is prohibited. 

For a possible data arrangement range referred to in 
the embodiments, a logical range according to an 
organization is used. However, the range may be applied to 

15 any and all relationship whose inclusive relations can be 
logically defined. For example, for the possible^data 
arrangement range, a physical range (a range within the 
premises of an office, a security protected room, etc.), or 
any pre-defined logical group (set of equipment 

20 identifiers) can be used. Alternatively, by designating 
such conditions that a storage device or a host computer 
has an authentication function, a range is pre-registered 
in a database, or the present invention is applied (data 
leakage beyond the possible arrangement range is restricted 
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even at the copy destination), a storage device or a host 
computer that satisfies the conditions may be in the range. 

Also, an expiration date may be given to a possible 
data arrangement range. For example, the possible data 
5 arrangement range will be "Office B" until a pre- specif ied 
date, and after such data, the possible data arrangement 
range will be "Company A" (the logical range shown in Fig. 
2 is prerequisite) . 

In the first through the third embodiments, at the 

10 time of making data copying, a search was made as to 
whether the copy is made beyond the possible data 
arrangement range or not, but the search may be made at the 
time of a data migration. Also, at this time, data 
migration may be executed for the designation of migration 

15 within a possible data arrangement range, and data copying 
may be executed for the designation of migration beyond the 
possible data arrangement range. 

In addition, in the data processing method and the 
storage range management method of the present invention, 

20 processing may be so designed that, by executing data 
migration in a storage range, all data can be retained 
within a possible data arrangement range at the time of 
executing a resource re -arrangement function to distribute 
loads or to improve performance. 
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Next, when any description of a group definition 
referred to in the first embodiment is changed, there is a 
possibility regarding some data that the possible data 
arrangement range is not retained after the change in the 
5 group definition, though possible arrangement range of all 
data was retained before such change. Further, when an 
operation only to issue a warning without prohibiting 
copying is executed for a request for data copying beyond a 
possible data arrangement range, it is sometimes required 

10 to know where data that is available beyond the possible 
arrangement range is located. For such purposes, such 
function that acquires a list of data that is included in 
the designated storage range and are placed beyond a 
possible data arrangement range may be provided for all 

15 storage ranges (all volumes in a designated storage device, 
all file systems in a designated organization, etc.) that 
are available in the designated range. 

In a program to process data for file format 
conversion, file encryption, etc., the possible arrangement 

20 range of data before processing may be specified as the 

possible arrangement range of data after processing. Also, 
in a program to handle data and storage areas such as an 
operating system or a logical volume manager, for all data 
that is written by a process which opened a file to which a 



possible data arrangement range is designated, the above- 
stated possible data arrangement range may be automatically 
set. 

In addition, a process which has opened, if once, a 
file whose possible data arrangement range is restricted, 
or a process which is currently executing to open a file 
may be restricted so that data transfer to any storage area 
beyond the possible data arrangement range cannot be 
executed. Further, the restriction may be taken up by a 
process that is generated out of the above-stated processes. 
This is an arrangement, for example, for a user who is 
executing a process for file open that contains a possible 
data arrangement range of "Department D" not to leak out 
secret information, since the user handles secret 
information of Department D. 

In order to support the data processing method and 
the storage area management method of the present invention, 
for a case that a user uses a program having a function to 
store a file, a dialogue to allow the user to designate the 
possible data arrangement range of a file to be stored may 
be displayed before or after entering the name of the file 
to be stored, make the user designate a possible data 
arrangement range, and the range thus designated may be 
recorded as the possible data arrangement range of that 
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file. 

Furthermore, in a program to display a list of 
descriptions of storage areas, a method for displaying a 
storage area having range information within a logical 
5 range specified by a user and a method for displaying other 
storage areas may be changed. 

In a storage area that is configured with two or 
more different groups of storage areas, a judgment is made 
as to whether range information of a storage area which 

10 forms each element of a storage area group are all same or 
not, and if the information are not same, means for issuing 
a warning may be provided. One example is that, in a 
logical volume that is configured with two volumes located 
in a storage device, a warning is issued if the range 

15 information of logical volumes of volumes located in the 
storage device. Alternatively, processing may be 
interrupted or a warning may be issued at the time of 
configuring a storage area from storage area groups, if 
even one storage area having different range information 

20 exists among storage areas that are elements of the storage 
area group is different. 

It should be noted that a program that is executed 
in respective embodiments is executed on a computer. 
However, for the distribution of such program, the program 
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may be provided in computer readable recording media such 
as a CD or a ROM, or may be provided by being downloaded 
from a server through networks including the Internet. 

5 [Advantages of the present invention that become apparent 
from respective embodiments] 

As may be apparent from respective embodiments, 
according to the present invention, it is possible to 
provide a data processing method which prevents violation 
10 of rules or leaking out of secret information attributed to 
erroneous operation of an administrator, thus enabling data 
management that offers excellent confidentiality, in making 
copies of corporate business data, etc. 



